# Vulnerabilities published in 2006


- [CVE-2006-1746](https://insights.sbomify.com/CVE-2006-1746/): Path traversal in tincan:phplist (medium 5.0)
- [CVE-2006-1745](https://insights.sbomify.com/CVE-2006-1745/): Cross-site scripting in bitweaver:bitweaver (low 2.6)
- [CVE-2006-1744](https://insights.sbomify.com/CVE-2006-1744/): Memory corruption in joey hess:bsdgames (medium 4.6)
- [CVE-2006-1743](https://insights.sbomify.com/CVE-2006-1743/): SQL injection in jbook:jbook (high 7.5)
- [CVE-2006-1742](https://insights.sbomify.com/CVE-2006-1742/): Use after free in mozilla:firefox (medium 5.0)
- [CVE-2006-1741](https://insights.sbomify.com/CVE-2006-1741/): Cross-site scripting in canonical:ubuntu linux (medium 4.3)
- [CVE-2006-1740](https://insights.sbomify.com/CVE-2006-1740/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2006-1739](https://insights.sbomify.com/CVE-2006-1739/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2006-1738](https://insights.sbomify.com/CVE-2006-1738/): Denial of service in mozilla:firefox (medium 5.0)
- [CVE-2006-1737](https://insights.sbomify.com/CVE-2006-1737/): Integer overflow in mozilla:firefox (critical 9.3)
- [CVE-2006-1736](https://insights.sbomify.com/CVE-2006-1736/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2006-1735](https://insights.sbomify.com/CVE-2006-1735/): Code injection in mozilla:firefox (critical 9.3)
- [CVE-2006-1734](https://insights.sbomify.com/CVE-2006-1734/): Code injection in mozilla:firefox (medium 6.8)
- [CVE-2006-1733](https://insights.sbomify.com/CVE-2006-1733/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2006-1732](https://insights.sbomify.com/CVE-2006-1732/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2006-1731](https://insights.sbomify.com/CVE-2006-1731/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2006-1730](https://insights.sbomify.com/CVE-2006-1730/): Integer overflow in mozilla:firefox (critical 9.3)
- [CVE-2006-1729](https://insights.sbomify.com/CVE-2006-1729/): Information disclosure in canonical:ubuntu linux (medium 4.3)
- [CVE-2006-1728](https://insights.sbomify.com/CVE-2006-1728/): Other in canonical:ubuntu linux (critical 9.3)
- [CVE-2006-1727](https://insights.sbomify.com/CVE-2006-1727/): Privilege escalation in canonical:ubuntu linux (high 7.6)
- [CVE-2006-1726](https://insights.sbomify.com/CVE-2006-1726/): Security feature bypass in mozilla:firefox (critical 9.3)
- [CVE-2006-1725](https://insights.sbomify.com/CVE-2006-1725/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2006-1724](https://insights.sbomify.com/CVE-2006-1724/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2006-1723](https://insights.sbomify.com/CVE-2006-1723/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2006-1722](https://insights.sbomify.com/CVE-2006-1722/): Cross-site scripting in suche:shopxs (medium 6.8)
- [CVE-2006-1721](https://insights.sbomify.com/CVE-2006-1721/): Denial of service in cyrus:sasl (low 2.6)
- [CVE-2006-1720](https://insights.sbomify.com/CVE-2006-1720/): Cross-site scripting in arabless:saphplesson (medium 4.3)
- [CVE-2006-1719](https://insights.sbomify.com/CVE-2006-1719/): Denial of service in microsoft:ie (medium 5.0)
- [CVE-2006-1718](https://insights.sbomify.com/CVE-2006-1718/): Information disclosure in clever copy:clever copy (medium 5.0)
- [CVE-2006-1717](https://insights.sbomify.com/CVE-2006-1717/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 5.1)
- [CVE-2006-1716](https://insights.sbomify.com/CVE-2006-1716/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 5.1)
- [CVE-2006-1715](https://insights.sbomify.com/CVE-2006-1715/): Path traversal in tugzip:tugzip (medium 5.0)
- [CVE-2006-1714](https://insights.sbomify.com/CVE-2006-1714/): Other in phpmyforum:phpmyforum (high 7.5)
- [CVE-2006-1713](https://insights.sbomify.com/CVE-2006-1713/): Cross-site scripting in phpmyforum:phpmyforum (medium 6.8)
- [CVE-2006-1712](https://insights.sbomify.com/CVE-2006-1712/): Cross-site scripting in gnu:mailman (low 2.6)
- [CVE-2006-1711](https://insights.sbomify.com/CVE-2006-1711/): Plone allows remote users to modify arbitrary portraits (medium 5.0)
- [CVE-2006-1710](https://insights.sbomify.com/CVE-2006-1710/): SQL injection in design nation:dnguestbook (high 7.6)
- [CVE-2006-1709](https://insights.sbomify.com/CVE-2006-1709/): Cross-site scripting in interaktiv:interaktiv.shop (medium 6.8)
- [CVE-2006-1708](https://insights.sbomify.com/CVE-2006-1708/): SQL injection in clansys:clansys (high 7.5)
- [CVE-2006-1707](https://insights.sbomify.com/CVE-2006-1707/): Path traversal in kansok communications:shopweezle (medium 5.0)
- [CVE-2006-1706](https://insights.sbomify.com/CVE-2006-1706/): SQL injection in kansok communications:shopweezle (high 7.5)
- [CVE-2006-1705](https://insights.sbomify.com/CVE-2006-1705/): Missing authorization in oracle:oracle10g (low 2.1)
- [CVE-2006-1704](https://insights.sbomify.com/CVE-2006-1704/): Missing authorization in hubert plisson:sire (medium 5.0)
- [CVE-2006-1703](https://insights.sbomify.com/CVE-2006-1703/): Code injection in hubert plisson:sire (high 7.5)
- [CVE-2006-1702](https://insights.sbomify.com/CVE-2006-1702/): Code injection in spip:spip (high 7.5)
- [CVE-2006-1701](https://insights.sbomify.com/CVE-2006-1701/): Cross-site scripting in shadowed portal:shadowed portal (low 2.6)
- [CVE-2006-1700](https://insights.sbomify.com/CVE-2006-1700/): Auth bypass in aweb:scripts seller (high 7.5)
- [CVE-2006-1699](https://insights.sbomify.com/CVE-2006-1699/): Cross-site scripting in aweb:banner generator (low 2.6)
- [CVE-2006-1698](https://insights.sbomify.com/CVE-2006-1698/): Cross-site scripting in matt wright:matt wright guestbook (medium 4.3)
- [CVE-2006-1697](https://insights.sbomify.com/CVE-2006-1697/): Cross-site scripting in matt wright:matt wright guestbook (medium 4.3)
- [CVE-2006-1696](https://insights.sbomify.com/CVE-2006-1696/): Cross-site scripting in gallery project:gallery (medium 4.3)
- [CVE-2006-1695](https://insights.sbomify.com/CVE-2006-1695/): Race condition in fbida:fbida (low 1.2)
- [CVE-2006-1694](https://insights.sbomify.com/CVE-2006-1694/): SQL injection in xbrite:xbrite members (high 7.5)
- [CVE-2006-1693](https://insights.sbomify.com/CVE-2006-1693/): Denial of service in globalscape:secure ftp server (medium 5.0)
- [CVE-2006-1692](https://insights.sbomify.com/CVE-2006-1692/): SQL injection in manic web:mwnewsletter (high 7.5)
- [CVE-2006-1691](https://insights.sbomify.com/CVE-2006-1691/): SQL injection in manic web:mwnewsletter (high 7.5)
- [CVE-2006-1690](https://insights.sbomify.com/CVE-2006-1690/): Cross-site scripting in manic web:mwnewsletter (medium 6.8)
- [CVE-2006-1689](https://insights.sbomify.com/CVE-2006-1689/): Privilege escalation in hp:hp-ux (high 7.2)
- [CVE-2006-1688](https://insights.sbomify.com/CVE-2006-1688/): Code injection in squery:squery (high 7.5)
- [CVE-2006-1687](https://insights.sbomify.com/CVE-2006-1687/): Cross-site scripting in apt:apt-webshop-system (medium 4.3)
- [CVE-2006-1686](https://insights.sbomify.com/CVE-2006-1686/): Path traversal in apt:apt-webshop-system (medium 5.0)
- [CVE-2006-1685](https://insights.sbomify.com/CVE-2006-1685/): SQL injection in apt:apt-webshop-system (high 7.5)
- [CVE-2006-1684](https://insights.sbomify.com/CVE-2006-1684/): Path traversal in ecotwo:shopsystem (medium 5.0)
- [CVE-2006-1683](https://insights.sbomify.com/CVE-2006-1683/): SQL injection in chipmunk scripts:chipmunk guestbook (high 7.5)
- [CVE-2006-1682](https://insights.sbomify.com/CVE-2006-1682/): Cross-site scripting in talentsoft:web\+ shop (medium 4.3)
- [CVE-2006-1681](https://insights.sbomify.com/CVE-2006-1681/): Cross-site scripting in cherokee:cherokee httpd (medium 4.3)
- [CVE-2006-1680](https://insights.sbomify.com/CVE-2006-1680/): Information disclosure in jupiter cms:jupiter cms (low 2.6)
- [CVE-2006-1679](https://insights.sbomify.com/CVE-2006-1679/): Cross-site scripting in jupiter cms:jupiter cms (medium 4.3)
- [CVE-2006-1678](https://insights.sbomify.com/CVE-2006-1678/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2006-1677](https://insights.sbomify.com/CVE-2006-1677/): Information disclosure in maxdev:md-pro (medium 6.4)
- [CVE-2006-1676](https://insights.sbomify.com/CVE-2006-1676/): SQL injection in maxdev:md-pro (medium 6.4)
- [CVE-2006-1675](https://insights.sbomify.com/CVE-2006-1675/): Cross-site scripting in phpwebgallery:phpwebgallery (low 2.6)
- [CVE-2006-1674](https://insights.sbomify.com/CVE-2006-1674/): Cross-site scripting in phpwebgallery:phpwebgallery (low 2.6)
- [CVE-2006-1673](https://insights.sbomify.com/CVE-2006-1673/): Cross-site scripting in jelsoft:vbug tracker (low 2.6)
- [CVE-2006-1672](https://insights.sbomify.com/CVE-2006-1672/): Misconfiguration in cisco:ons 15310-cl series (high 7.5)
- [CVE-2006-1671](https://insights.sbomify.com/CVE-2006-1671/): Denial of service in cisco:ons 15310-cl series (medium 5.0)
- [CVE-2006-1670](https://insights.sbomify.com/CVE-2006-1670/): Denial of service in cisco:ons 15310-cl series (high 7.8)
- [CVE-2006-1669](https://insights.sbomify.com/CVE-2006-1669/): SQL injection in phpheaven:phpmychat (medium 6.4)
- [CVE-2006-1668](https://insights.sbomify.com/CVE-2006-1668/): File upload in crafty syntax image gallery:crafty syntax image gallery (critical 9.0)
- [CVE-2006-1667](https://insights.sbomify.com/CVE-2006-1667/): SQL injection in crafty syntax image gallery:crafty syntax image gallery (high 7.5)
- [CVE-2006-1666](https://insights.sbomify.com/CVE-2006-1666/): SQL injection in arab portal:arab portal (high 7.5)
- [CVE-2006-1665](https://insights.sbomify.com/CVE-2006-1665/): Cross-site scripting in arab portal:arab portal (low 2.6)
- [CVE-2006-1664](https://insights.sbomify.com/CVE-2006-1664/): Memory corruption in xine:xine-lib (high 7.5)
- [CVE-2006-1662](https://insights.sbomify.com/CVE-2006-1662/): Code injection in limbo cms:limbo cms (high 7.5)
- [CVE-2006-1661](https://insights.sbomify.com/CVE-2006-1661/): Cross-site scripting in sk soft:skforum (medium 6.8)
- [CVE-2006-1660](https://insights.sbomify.com/CVE-2006-1660/): Cross-site scripting in softbizscripts:image gallery script (medium 6.8)
- [CVE-2006-1659](https://insights.sbomify.com/CVE-2006-1659/): SQL injection in softbizscripts:image gallery script (medium 6.4)
- [CVE-2006-1658](https://insights.sbomify.com/CVE-2006-1658/): Code injection in chucky a. ivey:n.t. (high 7.5)
- [CVE-2006-1657](https://insights.sbomify.com/CVE-2006-1657/): Cross-site scripting in chucky a. ivey:n.t. (medium 4.3)
- [CVE-2006-1656](https://insights.sbomify.com/CVE-2006-1656/): Command injection in vserver:util-vserver (high 7.2)
- [CVE-2006-1655](https://insights.sbomify.com/CVE-2006-1655/): Memory corruption in mpg123:mpg123 (medium 6.5)
- [CVE-2006-1654](https://insights.sbomify.com/CVE-2006-1654/): Path traversal in hp:color laserjet (medium 5.0)
- [CVE-2006-1653](https://insights.sbomify.com/CVE-2006-1653/): Code injection in angelinecms:angelinecms (high 7.5)
- [CVE-2006-1652](https://insights.sbomify.com/CVE-2006-1652/): Memory corruption in ultravnc:tabbed viewer (critical 9.0)
- [CVE-2006-1651](https://insights.sbomify.com/CVE-2006-1651/): Security feature bypass in microsoft:isa server (high 7.5)
- [CVE-2006-1650](https://insights.sbomify.com/CVE-2006-1650/): Security feature bypass in mozilla:firefox (medium 5.0)
- [CVE-2006-1649](https://insights.sbomify.com/CVE-2006-1649/): Security feature bypass in eset software:nod32 antivirus (high 7.2)
- [CVE-2006-1648](https://insights.sbomify.com/CVE-2006-1648/): Denial of service in smart technologies:synchroneyes (medium 5.0)
- [CVE-2006-1647](https://insights.sbomify.com/CVE-2006-1647/): Denial of service in smart technologies:synchroneyes (high 7.8)
- [CVE-2006-1646](https://insights.sbomify.com/CVE-2006-1646/): Denial of service in internet key exchange:internet key exchange (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/54/